$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa File: 3918d96d-ec82-3d51-91a7-3a2529db41f1.roa (raw, json) Hash identifier: prBVZyoaA9Iw4nXBTfTnEkyIdTc81jt5qKYneluSfl0= Subject key identifier: 39:1E:65:DE:A1:40:9C:C2:D4:BF:65:D2:92:F2:92:D0:27:59:8E:AB Certificate issuer: /CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Certificate serial: 010D0C9F4328584F093CD9D7116C510CF137F000 Authority key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 72.18.92.0/24 maxlen: 24 72.18.93.0/24 maxlen: 24 72.18.94.0/24 maxlen: 24 72.18.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d9:d7:11:6c:51:0c:f1:37:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=12e5da6a-edf2-4b6f-be93-cf70aeb09487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:b6:c7:69:75:d0:8e:16:73:77:5b:4e:09: 03:d8:96:34:7b:b3:ff:f1:40:86:0e:18:92:e0:42: d6:7b:2a:c2:41:80:07:03:82:03:45:60:72:c0:c8: 0e:92:13:21:36:f6:13:5a:02:ba:c3:4d:a6:2c:e0: 5d:fa:28:f0:b7:25:80:85:b8:76:55:1d:69:db:8e: 41:62:47:d5:a6:09:74:a5:8b:82:b4:e6:cd:5f:55: 00:e9:01:13:2c:15:2d:54:ad:0e:af:92:1d:28:bc: 9d:1e:63:c4:7c:4b:34:99:63:50:76:fe:fa:34:ca: 59:b9:4b:a8:13:f2:43:e7:b7:fe:07:01:03:03:2b: b7:00:bb:66:bb:77:d0:5f:d0:c7:42:52:52:c4:cb: db:63:7b:04:68:84:cb:1e:1d:98:5f:51:8d:df:b4: bd:9a:73:2c:4e:b2:b7:ff:b0:4a:99:0e:58:50:af: c8:cf:04:3d:79:58:83:a2:13:fd:cc:64:a3:fe:fb: 96:c7:c5:33:54:54:16:0e:06:40:fd:be:24:22:df: 5b:92:18:75:db:3b:2b:24:ff:78:98:54:4f:12:f3: 9a:47:59:41:41:9a:b6:5f:cb:73:ad:75:4e:9d:6c: c0:9d:7b:5d:9c:0d:83:d8:6b:da:d5:25:eb:95:70: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:65:DE:A1:40:9C:C2:D4:BF:65:D2:92:F2:92:D0:27:59:8E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/3918d96d-ec82-3d51-91a7-3a2529db41f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.crl X509v3 Authority Key Identifier: keyid:09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer sbgp-ipAddrBlock: critical IPv4: 72.18.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:90:63:88:fd:02:67:e8:eb:7a:31:3d:d9:a5:bc:aa:b4:bf: 7e:24:82:ea:0d:bd:56:f5:56:bc:bd:45:87:78:79:71:bf:36: 54:25:f6:97:5e:d3:f1:80:30:71:2f:5c:8b:0e:08:61:2a:30: ac:b6:43:bd:92:91:b7:99:9c:24:fa:f7:c3:f4:cd:36:a1:0e: 9a:12:18:e0:94:67:2b:06:ec:84:8e:04:dd:04:25:c4:bf:d9: ed:75:9e:d3:e5:5f:ff:9e:44:f4:1f:69:1b:a7:d5:3f:b4:96: 5b:e5:00:42:95:e5:21:88:b0:b8:1c:9e:bd:3e:ed:5a:8b:89: 1d:8c:83:a6:33:4f:ee:c6:ff:60:5c:2c:78:c8:c2:12:13:98: 12:22:e3:62:81:1b:0f:14:67:6c:69:ef:a2:fa:40:3c:bb:ce: 5d:80:11:19:49:a6:6d:af:6f:73:da:30:7a:0c:96:81:cd:ad: 79:39:71:8d:cd:bd:bd:36:7e:4d:9b:dc:b7:71:cd:f6:e1:9a: f5:9f:ae:60:3f:30:6e:eb:f9:48:57:64:89:dd:42:34:35:a8: d6:a1:2b:62:1d:2e:eb:43:77:fb:0a:da:9c:5c:86:b5:12:43: ac:c8:bf:49:b9:be:9b:96:5d:b1:0d:d7:47:0b:e0:04:8d:2d: 24:f3:1a:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNnXEWxRDPE38AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0 ZDA0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MTJlNWRhNmEtZWRmMi00YjZmLWJlOTMtY2Y3MGFlYjA5NDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6q2x2l10I4Wc3dbTgkD2JY0e7P/8UCGDhiS 4ELWeyrCQYAHA4IDRWBywMgOkhMhNvYTWgK6w02mLOBd+ijwtyWAhbh2VR1p245B YkfVpgl0pYuCtObNX1UA6QETLBUtVK0Or5IdKLydHmPEfEs0mWNQdv76NMpZuUuo E/JD57f+BwEDAyu3ALtmu3fQX9DHQlJSxMvbY3sEaITLHh2YX1GN37S9mnMsTrK3 /7BKmQ5YUK/IzwQ9eViDohP9zGSj/vuWx8UzVFQWDgZA/b4kIt9bkhh12zsrJP94 mFRPEvOaR1lBQZq2X8tzrXVOnWzAnXtdnA2D2Gva1SXrlXChqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkeZd6hQJzC1L9l0pLyktAnWY6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1 OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvMzkxOGQ5NmQtZWM4Mi0z ZDUxLTkxYTctM2EyNTI5ZGI0MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmQ2NTk3NWUtZDIyOS00NWI3LWJk YmUtNDZhYjhmNWQ0ZDA0L2JkNjU5NzVlLWQyMjktNDViNy1iZGJlLTQ2YWI4ZjVk NGQwNC5jcmwwHwYDVR0jBBgwFoAUCU5sLQfoDJZM5x/VrfOi55488pMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFi OGY1ZDRkMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBJcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyQY4j9Amfo63oxPdmlvKq0v34kguoNvVb1Vry9RYd4eXG/NlQl9pde 0/GAMHEvXIsOCGEqMKy2Q72SkbeZnCT698P0zTahDpoSGOCUZysG7ISOBN0EJcS/ 2e11ntPlX/+eRPQfaRun1T+0llvlAEKV5SGIsLgcnr0+7VqLiR2Mg6YzT+7G/2Bc LHjIwhITmBIi42KBGw8UZ2xp76L6QDy7zl2AERlJpm2vb3PaMHoMloHNrXk5cY3N vb02fk2b3LdxzfbhmvWfrmA/MG7r+UhXZIndQjQ1qNahK2IdLutDd/sK2pxchrUS Q6zIv0m5vpuWXbEN10cL4ASNLSTzGvs= -----END CERTIFICATE-----Generated at Thu Sep 24 21:30:39 2026 by rpki-client